@conference {616, title = {On Access Control, Capabilities, Their Equivalence, and Confused Deputy Attacks}, booktitle = {Proceedings of the 29th IEEE Computer Security Foundations Symposium (CSF)}, year = {2016}, author = {Vineet Rajani and Deepak Garg and Tamara Rezk} }